Wednesday, 26 June 2024

HOW TO FIND INACTIVE COMPUTER ON ACTIVE DIRECTORY USING POWERSHELL

 Hi there,

If you are looking to tidy up your Active Directory by finding inactive computer, I have a PowerShell script that can do just that. Save and run this script on your domain controller. This is just a audit tool and wont delete any thing.

  1. Save the code with a ".PS1" extension.
  2. Open PowerShell as an admin and run the script.


    Clear-Host
    Write-Host -ForegroundColor yellow " FIND INACTIVE USERS/STALE COMPUTERS"

    # Prompt user for number of days of inactivity
    $daysInactive = Read-Host "Enter number of days of inactivity"

    # Calculate the threshold date
    $thresholdDate = (Get-Date).AddDays(-$daysInactive)

    # Function to recursively fetch OU path
    function Get-OUPath {
    param (
    [string]$DN
    )

    # Split DistinguishedName into its components
    $components = $DN -split ','
    $ouPath = @()

    # Iterate through components to construct OU path
    for ($i = 1; $i -lt $components.Count; $i++) {
    if ($components[$i] -match '^OU=(.+)$') {
    $ouPath += $Matches[1]
    }
    }

    # Reverse the OU path to get correct order (child to parent)
    $ouPath = $ouPath -join '\'
    return $ouPath
    }

    # Search for inactive computers in Active Directory
    $inactiveComputers = Get-ADComputer -Filter {LastLogonTimeStamp -lt $thresholdDate -and Enabled -eq $true} -Properties LastLogonDate, DistinguishedName |
    Select-Object Name, LastLogonDate, @{
    Name="OUPath";
    Expression={
    # Call Get-OUPath function to retrieve OU path
    Get-OUPath -DN $_.DistinguishedName
    }
    }

    # Display results in Out-GridView
    $inactiveComputers | Out-GridView

HOW TO FIND INACTIVE USER ACCOUNT ON ACTIVE DIRECTORY USING POWERSHELL

Hi there,

If you are looking to tidy up your Active Directory by finding inactive accounts, I have a PowerShell script that can do just that. Save and run this script on your domain controller. This is just a audit tool and wont delete any thing.

  1. Save the code with a ".PS1" extension.
  2. Open PowerShell as an admin and run the script.


    Clear-Host

    Write-Host -ForegroundColor yellow " FIND INACTIVE USERS/STALE USER"

    # Import the Active Directory module
    Import-Module ActiveDirectory

    # Prompt the user for the number of days
    $daysInactive = Read-Host "Enter the number of days for inactive accounts"

    # Calculate the date
    $timeSpan = (Get-Date).AddDays(-$daysInactive)

    # Search for inactive user accounts
    $inactiveAccounts = Get-ADUser -Filter {LastLogonDate -lt $timeSpan -and Enabled -eq $true} -Property LastLogonDate, DistinguishedName |
    Select-Object Name, SamAccountName, LastLogonDate, DistinguishedName

    # Check if any inactive accounts were found
    if ($inactiveAccounts.Count -eq 0) {
    Write-Host "No inactive accounts found."
    } else {
    # Display the inactive accounts in a grid view
    $inactiveAccounts | Out-GridView -Title "Inactive User Accounts"
    }